Advisories · Technology

1024-lab SmartAdmin.

Every CVE that names 1024-lab SmartAdmin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-110117 CVE record

CVSS 7.1 High

SmartAdmin through 3.30.0 Missing Authorization via AdminProtectController
- 1024-lab SmartAdmin
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-3725 CVE record

CVSS 5.3 Medium

1024-lab/lab1024 SmartAdmin FreeMarker Template MailService.java freemarkerResolverContent special elements used in a template engine
- 1024-lab SmartAdmin
- lab1024 SmartAdmin
- Code injection
- CWE-791
Not analysed yet 8 Mar 2026
CVE-2026-3721 CVE record

CVSS 5.1 Medium

1024-lab/lab1024 SmartAdmin Help Documentation HelpDocAddForm.java cross site scripting
- 1024-lab SmartAdmin
- lab1024 SmartAdmin
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 8 Mar 2026
CVE-2026-3720 CVE record

CVSS 5.1 Medium

1024-lab/lab1024 SmartAdmin Notice notice-form-drawer.vue cross site scripting
- 1024-lab SmartAdmin
- lab1024 SmartAdmin
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 8 Mar 2026